Description
In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: prime: fix refcount underflow Calling nouveau_bo_ref() on a nouveau_bo without initializing it (and hence the backing ttm_bo) leads to a refcount underflow. Instead of calling nouveau_bo_ref() in the unwind path of drm_gem_object_init(), clean things up manually. (cherry picked from commit 1b93f3e89d03cfc576636e195466a0d728ad8de5)
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
ab9ccb96a6e6f95bcde6b8b2a524370efdbfdcd6 to < 3bcb8bba72ce89667fa863054956267c450c47efaffectedab9ccb96a6e6f95bcde6b8b2a524370efdbfdcd6 to < 906372e753c5027a1dc88743843b6aa2ad1aaecfaffectedab9ccb96a6e6f95bcde6b8b2a524370efdbfdcd6 to < 16998763c62bb465ebc409d0373b9cdcef1a61a6affectedab9ccb96a6e6f95bcde6b8b2a524370efdbfdcd6 to < ebebba4d357b6c67f96776a48ddbaf0060fa4c10affectedab9ccb96a6e6f95bcde6b8b2a524370efdbfdcd6 to < f23cd66933fe76b84d8e282e5606b4d99068c320affectedab9ccb96a6e6f95bcde6b8b2a524370efdbfdcd6 to < 2a1b327d57a8ac080977633a18999f032d7e9e3faffectedab9ccb96a6e6f95bcde6b8b2a524370efdbfdcd6 to < a9bf3efc33f1fbf88787a277f7349459283c9b95affected
Linux Linux
Default version status: affected
3.9affected0 to < 3.9unaffected5.4.282 to ≤ 5.4.*unaffected5.10.224 to ≤ 5.10.*unaffected5.15.165 to ≤ 5.15.*unaffected6.1.104 to ≤ 6.1.*unaffected6.6.45 to ≤ 6.6.*unaffected6.10.4 to ≤ 6.10.*unaffected6.11 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/3bcb8bba72ce89667fa863054956267c450c47ef ↗
- https://git.kernel.org/stable/c/906372e753c5027a1dc88743843b6aa2ad1aaecf ↗
- https://git.kernel.org/stable/c/16998763c62bb465ebc409d0373b9cdcef1a61a6 ↗
- https://git.kernel.org/stable/c/ebebba4d357b6c67f96776a48ddbaf0060fa4c10 ↗
- https://git.kernel.org/stable/c/f23cd66933fe76b84d8e282e5606b4d99068c320 ↗
- https://git.kernel.org/stable/c/2a1b327d57a8ac080977633a18999f032d7e9e3f ↗
- https://git.kernel.org/stable/c/a9bf3efc33f1fbf88787a277f7349459283c9b95 ↗
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html ↗
- https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html ↗